CVE-2020-26682 Integer overflow in n/a

High 8.8 Published 16 Oct 2020 Updated 4 Aug 2024

A signed integer overflow in libass can lead to a denial of service when processing malicious subtitle files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2020-26682?

CVE-2020-26682 is a high-severity vulnerability in n/a, published on 16 Oct 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

In libass 0.14.0, the `ass_outline_construct`'s call to `outline_stroke` causes a signed integer overflow.

Weakness: CWE-190

Which versions are affected by CVE-2020-26682?

It affects 1 product.

Linux distribution packages (15)

`libass` SUSE:Enterprise Storage 6	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise High Performance Computing 15-ESPOS	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise High Performance Computing 15-LTSS	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise Module for Desktop Applications 15 SP2	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise Server 15 SP1-BCL	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise Server 15 SP1-LTSS	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise Server 15-LTSS	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise Server for SAP Applications 15	All versions	`0.14.0-3.3.1`
`libass` SUSE:Linux Enterprise Server for SAP Applications 15 SP1	All versions	`0.14.0-3.3.1`
`libass` SUSE:Manager Proxy 4.0	All versions	`0.14.0-3.3.1`
`libass` SUSE:Manager Retail Branch Server 4.0	All versions	`0.14.0-3.3.1`
`libass` SUSE:Manager Server 4.0	All versions	`0.14.0-3.3.1`
`libass` openSUSE:Leap 15.2	All versions	`0.14.0-lp152.4.3.1`

Products include Libass Project Libass.

How do I fix CVE-2020-26682?

Upgrade to a fixed version.

Is CVE-2020-26682 being exploited?

There is no known exploitation of CVE-2020-26682 in the wild and no public exploit code.

CVE-2020-24994 Memory corruption in n/a High 8.8

Sources

Also known as DEBIAN-CVE-2020-26682, GHSA-87rf-m79q-qqqf, JLSEC-2026-155, MGASA-2021-0017, SUSE-SU-2021:0936-1, UBUNTU-CVE-2020-26682 and 1 more.